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' Abstract. This work is the development and analysis of the recently proposed 

CNJ . quantum cryptographic protocol, based on the use of the two-mode coherently 

correlated states. The protocol is supplied with the cyrptographic control procedures. 

^ • The channel error properties and stability against eavesdropping are examined. State 

I/"") , detection features are proposed. 
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1. Introduction. 

o : 

The goals of quantum cryptography and secure quantum communications EJ IS] can 
be achieved using various protocols, which were developed and realized H2] in the 
past years on the basis of the quantum entanglement IE] of weak beams and the 
single IE] or few photon states [H], mostly by means of adjusting and detecting their 
polarization angles [T3] . 

.{ph ! Another method, based on the usage of the two-mode coherently correlated 

(TMCC) beams was proposed recently [TUl E] . In this case the secure cryptographic 
key is generated by the laser shot noise and dublicated through the quantum channel. 
Unlike the single or few photon schemes, which require large numbers of transmission 
reiterations to obtain the statistically significant results, the TMCC beam can be 
intensive enough to make each single measurement statistically significant and thus to 
use single impulse for each piece of information, and remain cryptographically steady. 

In this work we analyse the error and security properties of the quantum 
channels, based on the TMCC-beams and propose some additions to the TMCC-based 
cryptographic protocol. 

The two-mode coherently correlated state is the way we refer to the generalized 
coherent state |4., which can be described by its presentation through series by Fock 
states: 

i oo \ n 

\x)= . r^H (i) 
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Here we use the designation \nn) = \n), ® \n) 2 , where \n) 1 and |n) 2 stand for the 
states of the 1 st and 2 nd mode accordingly, represented by their photon numbers. The 
states (0) are not the eigenstates for each of the annihilation operators separately, but 
are the eigenstates for the product of annihilation operators: 

ai a 2 1 A) = A | A) . (2) 

Such states can also be obtained from the zero state: 

|A> = T ) / o(Aa+a+) |0> (3) 
\Jh ( 2 |A|) 

In this work we assume that two laser beams, which are propagating independently 
from each other, correspond to the two modes of the TMCC state. States of beams are 
mutually correlated. (Surely, the TMCC state can also be represented in another way, 
for example, as a beam consisting of two correlated polarizations [14]) 
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2. Beam measurement 

Unlike the usual non-correlated coherent states, which show their quasiclassical 
properties in the fact, that the mean value of a vector-potential of a corresponding 
beam is not equal to 0, the mean value of a vector-potential of a TMCC-beam and any 
other characteristic, which is linear in field, turns to be equal to 0, because during the 
averaging by the I s * mode the a% converts \n,n) to \n — l,n), which is orthogonal to all 
the present state terms, so (Aj| a« |A») = 0, and so the quasiclassical properties in their 
usual meaning are absent in this case. 

The intensity of the beam's radiation, registered by an observer is proportional 
to the mean of the N = a + a operator, which is the number of the photons in the 
corresponding mode. The mean observable values, which characterize the results of the 
measurements of the beam are: 

(N) = (A| a + a |A) , (iV 2 ) = (A| a + aa + a |A) (4) 

These characteristics are squared in field, and thus their mean values don't turn 
to zero (surely, this fact is not specific for the TMCC-states, because the usual non- 
correlated states and processes, like the heat propagation, show the same properties). 

Assuming the state expression (JTJ) we obtain 

i oo I \ I In i oo I \ 1 2n 

W = T7^ E »J^U <iV 2 > = ' £n 2 ^- (5) 



/ (2|A|) n f nP" * /o(2|A|)^ ^ 
The mean number of registered photons is 



(N) = £ nP n {\) (6) 



n=0 



The probability of registering n photons depends on the intensity of a beam: 



IA 



2n 



Pn(X) ~ 7 (2|A|)n!' (?) 

An important feature of this distribution is the quick (proportional to n! 2 ) 
decreasing dependence of the registration probability on the photon number. 
This circumstance makes the experimental identification of the TMCC-states quite 
convenient. The distribution of the probability of different photon numbers registration 
along with the corresponding distribution for a usual coherent beam are given at the 
(figure HJ. 

Taking into account (JJJ) the expressions for the mean and mean square values of 
the registered photon numbers (0) turn to: 

|A| 2 / 1 (2|A|) />r2X lll2 



The type of the beam statistics can by characterized by the Mandel parameter: 




The dependece of the Mandel parameter (jHJ) on the mean photon number is given 
at the (figure El). One can easily see that the TMCC beam shows evident sub-Poisson 
statistics even at small intensities. 



4 <N> 6 




Figure 2. Mandel parameter dependence on the mean photon numbers value for a 
TMCC beam 



The measurements have the statistical uncertainty, caused by quantum fluctuations. 
This uncertainty can be characterized by the corresponding dispersion: 

a 2 = (N 2 ) - (N) 2 (10) 

Taking into account (jS)) we get the following expression: 
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The dependencies of the measurement results dispersion on the mean photon 
number for the TMCC-beam and a usual correlated beam are given at (figure EJ). 
One can see that there are significant differences for the TMCC and the Poisson beam 
distributions. This fact can be used for the TMCC-states identification. 




Figure 3. The dependencies of the measurement results dispersion on the mean 
photon number for the TMCC-beam (solid line) and a usual coherent beam (dotted 
line) 
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3. Communication via quantum channel 

Let we have to establish a secure quantum channel between two parties (figure EJ). Alice 
has the laser on her side, which produces two beams in the TMCC state. The optical 
channel is organized in such a way, that Alice receives one of the modes, the first, for 
example, i.e. <p A = <Pi,Pa(xa, to) = 1 , and Bob receives another one, i.e. tp B = ^2 
,ip B (x B ,to) = 1 at any moment of measurement t , where x^and x^are Alice's and 
Bob's locations respectively. Accordingly, Alice cannot measure the Bob's beam and 
vice versa: (p B (x A , t ) = 0, ^(xb,^) = 0. At that the vector-potential of the TMCC- 
beam is: 

A = cp* A (x, t)a\ + cp A (x, t)a A + (p* B (x, t)a% + tp B (x, t)a B (12) 

As it was noticed above, the quasiclassical properties in their usual meaning are 
absent in the case of a TMCC-beam, but they become apparent in the spatial correlation 
function, which characterizes the interdependence of the results of measurements taken 
by Alice and Bob: 

9ab =< N A N B > - < N A >< N B > (13) 



(p 2 a 2 



<PA A 



<P B a B 



B 



Figure 4. Quantum channel between two parties with a TMCC source 



It's useful to describe the channel quality by the relative correlation, which is 

< N A N B > - <N A xN B > 

PAB = (14) 

o~ A o- B 

The main feature of the TMCC state is that the value p AB is exactly equal to 1, 
while in the case of non-correlated beams we would get p AB = 0. This means that the 
measurements of the photon numbers, received by Alice and Bob, each with her/his 
own detector, not only show the same mean values, but even have the same deflection 
from the mean values. 

The laser beam is the semi-classical radiation with well defined phase, but due to 
the uncertainty principle for the number of photons and the phase of the radiation, 
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there is a large enough uncertainty in the photon numbers, this can be seen from the 
dispersion expression (jllj) . Thus one can observe the noise, which is similar to the shot 
noise in an electron tube. In the TMCC radiation the characteristics of such noise for 
each of the modes are amazingly well correlated to each other. This fact enables the use 
of such radiation for generation of a random code, which will be equally good received 
by two mutually remote detectors. 

3.1. The protocol 

The following scheme can be used for the TMCC-based protocol. The laser is set up 
to produce the constant mean number of photons during the session and both parties 
know this number. At some moment Alice and Bob start the measurements. They 
detect the number of photons at unit time by measuring the integrated intensity of the 
corresponding incoming beam. If the number of photons for the specific unit time is 
larger than the known expected mean (which is due to the shot noise), the next bit of 
the generated code is considered to have the value "1" . If the measured number is less 
than the expected mean, the next bit is considered to be equal to "0" : 



Upon the receipt of a sufficient number of bits (the code), both Bob and Alice divide 
them in half, each obtaining two bit sequences (half-codes). Bob encodes one sequence 
with another, using the XOR (excluding OR) logical operation, and sends this encoded 
half-code to Alice using any public channel. Alice uses any of her half-codes to decode 
the code she has got from Bob using the same XOR operation. She compares the result 
of this operation with another of her half-codes. If all the bits coincide, this means that 
Alice and Bob both have the same code, which can be used as a cryptographic key for 
encoding their communication. Otherwise they have to repeat the key generation and 
transfer procedure and check the channel for the possible eavedropping if the procedure 
fails again. 

3.2. Quantum channel error analysis 

Let the parties of the secret key transmission procedure are using the protocol described 
above, thus they estimate the value of the next bit by comparing the actual registered 
photon number to the average. The probability of detecting " 0" bit value then is 



The noise is present in the channel and it may increase the number of the registered 
photons. We suppose that the noise is thermal and assume that it may, with some 
probability, cause an appearance of one and no more than one additional photon in any 




(15) 



(16) 



n=0 
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of the modes during the time of a bit detection. We will denote the probability of a 
noise photon detection as e and refer to it as the noise factor. 

We suppose that the channel is qualitative enough to transfer the impulse at the 
required distance without losing any single photon, thus errors are possible only due to 
the appearance of the noise photons. 

An error, when Alice registers "0" bit value and Bob registers "1" may occur upon 
the joint realization of two events. The first is that Alice detects the maximum number 
of possible for the "0" bit value, which is, according to the proposed protocol, equal 
to the integer part of (n). The second is that in addition to this number Bob detects 
the appearance of a noise photon. The opposite situation, when Alice gets the " 1" bit 
value and Bob registers "0" is possible when the noise photon was detected by Alice, 
the probability of such error is the same. 

The probability of the realization of a state, which consists of the maximum possible 
for the "0" bit value photons and, at the same time, is detected as "0", is the relation 
between the corresponding probabilities: 



We will refer to this probability as to the error factor. So the probability of an 
error during the bit registration is equal to the product of the noise and error factors: 

(A) = eP max{0) (18) 



One can easily see that upon the intensity increase the error factor becomes less 
and so the channel tends to a self-correction if the beam gets more intensive. 
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4. Channel security 

The channel security is it's stability against the eavesdropping attacks. Let some 
eavesdropping intruder (her name is Eve) tries to obtain the secret key, which is 
transfered through the channel to Alice and Bob. Eve can use various eavesdropping 
techniques, but anyway her intrusion changes the statistical properties of the state, 
which can be described in the terms of the density matrixes. 
The density matrix of the TMCC-source is 

= |A> <A| = ww, „£„ |mm> (rai| (19) 

It consists of non-diagonal elements which correspond to the correlation between 
twin beams. Alice's detector reduces the source state by the Alice's mode states: 

p s — > p 2 = i (k\ p s Ik), (20) 

and turns non-diagonal elements to zero. So the density matrix of the mode, which 
is due to be measured by Bob is 

i oo I \ 1 2fc oo 

Pb = (Ps) A = Tr APs = —— J2 l -^\k)® (k\ = £ P fc \k) ® (k\ (21) 

When Eve starts the interception, she begins to measure one of the modes (Bob's, 
for example) with her own detector, and so the density matrixes, describing the 
measurement results for each of the detectors, will be 

p A = Tr BE p s p B = Tr AE p s p E = Tr AB p s (22) 

If Eve is intercepting the Bob's mode, her intrusion will not change the density 
matrix for Alice, p A = p A . 

We estimate the distance between the density matrixes by means of Hilbert-Schmidt 



P(B,E) — P(B,E) 



norm as D 2 = \\ P (b,e) — P(b,e)\\ 2 , or by means of the weak norm d 
Since both of the matrixes are diagonal, the distance by the weak norm is calculated as 
the maximum of the difference absolute value. These observables may be helpful for the 
detection of an interception or for estimating the successfulness of an eavesdropping. 
They can be obtained using the probabilities distributions: 

oo 

D 2 = J2( p n ri9) -P^' E) f (23) 

n=0 

d = max n= ,.U\Pi° n9) -P^ E) \) (24) 
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Figure 5. Eavesdropping attack on a TMCC-based quantum channel 



4-1. Beam splitting attack 

The basic type of the eavesdropping attacks is the beam splitting, when Eve splits and 
averts a part of the beam, which goes to Bob and detects its intensity by installing a 
detector at her side (figure EJ) . The field amplitude of the beam splits then in some p : q 
ratio and thus instead of the quantum mode we have to use the superposition 



A = <p* A {x, t)a\ + <p A {x, t)a A + <p B (x, t)a B + <P* B (x, t)a^ + 

+ip E (x, t)a E + (p* E (x, t)a% (25) 

Obviously, ^-b(^b,*o) = 1,Pe(xe, k) = 1 and <p E {xB,t ) = 0, (p B (x E ,to) = 0, 
(fA( x E)to) — 0. The 2 nd mode is decomposed on the basis, which consists of the modes 
coming to Bob and Eve. In order to describe the properties of this beam, we add a 
mode to the basis of Bob and Eve, which is orthogonal to Lp 2 : 

(fo = -qcp B + pip E (26) 

Without the eavesdropping (and, thus, without the splitter), Eve receives only the 
Lpo mode, in which the laser doesn't radiate, i.e. ipo = (p E and y?2 = <Pb- 

The following conversion of operators corresponds to this decomposition: 

a 2 = pa B + qa E , (27) 

a = -qa B + pa E (28) 

Thus 



(p a + (f 2 a 2 = (f B a B + tp E a E , 



(29) 
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and similarly for the hermitian-conjugate operators. 
These transformations change the state © to: 



-J {\a\(pa+ + qa+) |0) 



%(2|A|) 

Accordingly the probability distributions of photon numbers detection change: 
\\\ 2n \p\^I n (2\q\\X\) 



(30) 



PJ 3 



pE 



|g|«n!/ (2]A|) 



IA 


2n 


Q 


2n In(2\ P \\\\) 




\p\ n 


n!/ (2|A|) 



(31) 



(32) 



Knowing these distributions we can estimate if the beam splitting was successfull 
by calculating the distances between the density matrixes for Bob- Alice and Eve-Alice 
pairs. The dependence of these distances on the intensity of the source beam and the 
extent of eavesdropping is given at the (figure EJ) • 




lambda 



Figure 6. Distances between density matrixes for Alice-Bob and Alice-Eve pairs 
dependence on the intensity of the source beam A and the extent p — costp of 
eavesdropping 



One can see that in the case of the weak intercept the results of the Bob's 
measurements almost do not change, but the eavesdropping isn't effective. If it becomes 
effective, Bob detects losses in the transmission quality and the channel gets destroyed. 

Besides Bob can calculate the weak norm distance between the density matrixes 
for the received and expected states in order to check whether the beam was splitted or 
not. The dependence of the weak norm distance between actual and expected density 
matrixes on the extent of eavesdropping is given at the (figure EJ) . 
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Figure 7. The dependence of the weak norm distance between actual and expected 
density matrixes on the extent of eavesdropping. |A| = 2. 



4-2. State cloning attack 

Besides the basic eavesdropping, based on the beam splitting, Eve can try to measure 
the whole Bob's mode, which comes from the laser source and then clone the state by 
re-emitting the same photon number in Bob's direction using her own laser source. She 
can do it in three ways: 

(i) Eve has a large enough number of the single-photon laser sources and she switches 
on the required number of these; 

(ii) She has the usual coherent laser source which can be set up to produce the required 
average number of photons; 

(iii) She uses the TMCC-beam source to produce the required average number of 
photons in a TMCC-state, sending one of the modes to Bob and discarding another 
one. 

Still the statistical properties of the cloned state will not be the same. For the case of 
the multiple single-photon sources we may assume that Bob's detector can distinguish 
between the pure n-photon state and the mixture n one-photon states, produced by 
different non-correlated sources. If Eve uses the usual laser beam for the state cloning, 
it should be noticed that such beam has well-defined phase, which can be identified 
using the interference, for example. 

Now let's assume Eve uses the TMCC source. In order to clone the state she has to 
guess which value of the state parameter A corresponds to the exact number of photons, 
measured by Eve for the next incoming pulse. The optimal strategy for Eve to get 
the required value of A is the numerical solution of the state equation. Assuming Eve 
measured n photons in the Bob's mode, she tries to produce the same number of photons 
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by setting her laser up to the calculated state parameter X(n). When Eve builds the 
cloned states, the A(n) is includes an arbitrary phase multiplier, but it doesn't change 
the density matrix for Bob. This fact is the advantage of a TMCC-source based cloning 
technique. 

One mode of the cloned state is discarded and another, which will be in fact received 
and measured by Bob is averaged by the states of the discarded mode (similarly to the 
(J2IJ). Since the cloned state, under condition that Eve measured n photons, will give 
Bob the density matrix = p(A(n)), the full density matrix, corresponding to Bob's 
measurement results, is the mixture 

oo 

Pb = Y,~P { bPe,uW, (33) 

n=0 

of the cloned states for different n with weights 

p (\) |A|2n 
^ E >»w - n \2 Io (2\\\y 

which are equal to the probabilities of n photons registration by Eve. Finally the density 
matrix, corresponding to Bob's measurement has the form of mixture of k-photon states 

oo 

p B = Y.Pk\k)®{k\ (34) 

k=0 

with probabilities 

p = v l A ' 2n r 35 i 

k to^ 2 W\X\)k\H (2\X(n)\Y 1 ) 

The change of the probabilities distribution of the state can be easily estimated by 
Bob by comparison of the Mandel parameter of the cloned beam to the expected value. 
The successfulness of cloning can be estimated by calculating the distance between actual 
and expected density matrixes. The corresponding graphs, showing the dependence of 
these values on the intensity of a source beam are given at the (figure |HJ) • 

One can easily see that the state cloning attempts change the Mandel parameter and 
that density matrix of the cloned state differs from the density matrix of the original 
state even in the case of the optimal cloning strategy. Thus a cloning attack on a 
TMCC-based secure channel can be detected and so isn't effective. 
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Figure 8. Mandcl parameter of the cloned state (green line) and the density matrixes 
distances between the cloned and expected states by Hilbert-Schmidt (blue line) and 
weak (red line) norms. 

5. Conclusions 

Correlated coherent states of the two-mode laser beam (TMCC states) show interesting 
properties, which can be used, in particular, for the tasks of the quantum communication 
and cryptography. 

The TMCC-beams can be identified due to the special form of the registration 
probabilities distribution for different photon numbers in the corresponding beam and 
the dependence of the dispersion on the mean photon numbers value. 

On the one hand, each of the modes looks like a flow of the independent photons 
rather then a coherent beam, since mean values of the operators, which are linear in 
field, are equal to for each mode separately. 

On the other hand, the strong correlation between the results of measurements for 
each of the modes takes place. This correlation shows itself in the fact that in each of 
the modes numbers of photons are the same and even the shot noise shows itself equally 
in the both modes. This enables the use of the TMCC state as the generator and carrier 
of random keys in a quantum channel which is stable against the eavesdropping [10J. 

Thus, the TMCC-laser generates and transmits exactly the 2 copies of a random key. 
Unlike the single or two-photon schemes, which require large numbers of transmission 
reiterations to obtain the statistically significant results, the TMCC beam can be 
intensive enough to make each single measurement statistically significant and thus to 
use single impulse for each piece of information, and remain cryptographically steady. 
This allows to essentially increase the effective data transfer rate and distance. Analysis 
of the noise influence on the channel properties shows that the channel tends to a self- 
correction upon the beam intensity increase. 

The TMCC-based channel turns to be stable against the beam splitting and state 
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cloning eavesdropping, which are either non-effective or significant and easy to be 
detected. 
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